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1. e^Ai- SAilAi(E^)_1^ 
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^ SHtH^^I ^^^>^ ^^l^-a ^eA^ o]^ AAA>HtH^ 

^^^}^ AAA><-iiH<^l ^Y^m «c}-^l*>7l ^e^^ nil^l^l ^^el ^tb ^ 

^2fl<^l^ ^^7} ^eA^ t^l^l^ll- AAA^iiHS. ^^^V^, AAA^iBl^ 

71^21 ^^^^ tH«flAi:£ pflAl:^] ;^>^17> o>u|e). cflAl^l Lfl«.o) ^ 

^>-^^ ^ <^5l ^^Bl Sfxgo] AAA^i»1 Al^tflol] JZ]-Y^>7> ^el^ ^^^l^^l 

^ ^^^^ 4^ t-fl'^'iH-i i-im^oflAi ^ts**^! t^^^^ ^^^m 

AAA^i«1<^l 5i)-«-^>7l- ^-g:^^ AAA^iBl 

Aj^^o] Al;<1: :^^> ^cfl^!- #^ ^^^^ ^l^lJl ;^>^* ^^^^>^ 

H 3 
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ofloloi]oloilol A^a^oil 3^:^^} «j-;=cH ^e-S-^ i^l^l^l ^^S^ {Access-request 

messgae handling method for over load prevention at AAA server} 

#Hfl^ FA^q- AAA>Htf| ^1-*^H1 ^l^l^l 
£2^ f^efls] RADIUS ^>^^:£. 
^ vc^^ ^e^^ ^l^l^l^l 

10 : FACForeign Agent), 12 : ^ (Access-Request ) , 

11 : AAACAuthentication Authorization and Accounting), 

13 : ^e^7>(Access-Acept), 14 : y^l^jz}-^^^ (Account -Request ) , 
15 : Tfl^ 2)-^^ 7>( Account -Response), 20. 30, 37 : ^=(Code), 
21, 31, 38 : ^^^X Identifier), 22, 32, 39 : (Length), 
23 : <?l^-¥-(Authenticator), 24, 34-36, 41-43 : ^(Attribute) , 

<ii> ^ ^i^^ AAA ^^v^^] ^tb ^AS, ^^^>^ 
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-s.^ DflAi^ls o]^ im^^^s] s^^^im ^e-s.^ ^i^i^io]] t3i\^ v\]x\:^]q] 

^^^>^1 ^:n. ^^]^] ^^^}^ AAA^iB^oil :2f-¥-^>» «o^^l^>7l 



<12> ^hV^^ o.^^ AAACAuthentication, Authorization and Account ing)^iti1^ 

FACForeign Agent) ^>o]«Hl tl]olElSl ^^^^ RADIUSCRemote Authentication Dial-In 
User Service) ^S. A>-g-^i=f. RADIUS^ ^^^^ ^iwl7> o] <^<g (Dial-Up) 

<Hl7ll ^e^t!:(Authorization)^ ^<^^>7l ^t!: ^'^ci'^ ^iw]5>|- -f-Ai^ ^ oi^n 
#e}-oloiE/>^■^wl SSS^olcf. RADIUS S.S.S.^^ ^<y- cl] o] Hj] ^1 i ^<=^] 
1- -^^1^>J1. 2-^ ^^^1 ^^^7} ^-6-^ ^ ^Tfl ^r^-. RADIUS ^SS^-o]]^ o]^ 
(Authentication), (Author izat ion) , ;^]^^ (Account ing) ^1^1^171- $X^. 91^ ^1 

^1^1^ 7m 'el^l'-^^ vilE^oflA-lo^ S.ZL^ A] oil A>-§-^ ^^rl- 

^^^>c^, ^l^l^l^ rq-^ A]-^;^> Al^iB^ol]^-! o^Tg A>-g-;^l-7> «fl^ a] 

<13> ^sfloll ^^^^^7]S. A-lal>,# ^^>c:>^ ^B^^jlo]! ^^^^^^ 

^ c-flolE^^l 4^^Ai ^x^^.^ FA(Foreign Agent)^^ AAA a-^u^ Aj-ojo!]^ RADIUS 
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(Access-Request), ^ -E-^^K Access-Accept ) , ^5-^^ (Access-Chal lenge), ^l^^i)--^^ 
^(Account -Request), 7^1 ^6!5i}-^^7>( Account -Response) '^]^]^]7} $X^. <y^, 

^<^, ^l^'^l^l^l*^ ==r^^l-7i ^e^^ ^l^l^l^ ^ 

^f^^(Authenticator)^ 4^ t-11<^]t-1 ^^^^ ^^^Vfe FA<^1^i ^^S^]^ ^ 

c}-. ojo^o^ ^o.s <?If^^* ^>-§-^m ^^71- v]]X\^]^ 7>S5flAi o^o^^o] 

«c^^]^>7l ^^m. t^lAl;^loil ^^iai<:>l 'a^^}'^^ ^-R- 1^1^711- 

S = t:-ls^-£ Sfl^ ^-B- 7]o}-o.^ ^-i-^H^ ^l^l^l <^1^^H AAA 

^^^91 ^e^7>l- ^ ^i:f. I^S^-A-I ^11^1^121 ^^AlA] nil 

^1^1^ "y^^^ ifl^l^l -yr^Bl^ ^3l.7> ^^^r:^. 

<14> ^e-S-^ ^lAl;^loll^ tl^^* ^>^^><^ ^>-§-^l- til^^l* "a-^sl-srVa^ AAAAi 

n]S. ^^t}^, «fl^ AAAA^tH^ 91^^^ ^>-§-*H •a-^sl-^ ^>-§-^> wl^a^ll- ^^^V^ 
^^o. ^^^4. ol^ ol-^^ FA^llAi A>-g-;^> wl^7l» ^J:^^>7l ol^oil 

A^^t:]-. irl-el-Ai ^^.S-^^ ^]^]^]^ ^t\]o]B\o\ ^A^:^(Attr ibute)^^ 7]^o^ 

^ ^ 9X^. =7^^^>^ ^^]^ C-llolElHfloliol 7lEl- ^ C^&l 

Bl uf^oi ^ja.^>(il AAA A-liJ^ Ali^oil ai)-^s>7> ^el^ ^'^^^M, ^ 

e*l7>, ^e^^. 7il^2l.^^7> t,llAl>cl^ A>-g-^> Wl^^l «-^ol l^c^lAl 

91^^^ ^lAl^l AHlofl Cfltb *>7l ^^A-lu> Af-g-^Cl-. n>«-ol^ pflAl^l ;^>^lSl. 

AAA A-lttlfil- FAA>oloil ^-^t!: wl^7l» '^J^.^S MD5 ^'^sM "el^^^t^l 
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^]o] ^^o]] cflsfl^i a1-§.e):e.S, AAA A-lo1<^lAi^ '^lAl^l* ^^^>^ ^1^1^]^ ^tfl 

£1^ ^^-S-^ ^l^l^lS] ^^^^ ^^^1-^ FA^ ^^1 

^^4^ ^^^>^, AAA 91^. €^V^<^5^ ^1^^<^1 71^ 

^ ^^^rf. FAfi}- AAA ^iw1^>*='Hl^ RADIUS ^f-g-tt^-. RADIUS ^S:£#<^l>^i 

^^]^] ^^^^]^] n<']^^^ ^HHl 91^^ ^^}^ 9l^^k^ ^>-g-*M 91^^^ 

-^^ ^^71 S 5jfl^ c-llo]E^ A^^l-ig FA^ -f-^^ ^^7]7> 

^1 ^^*>7l ^tb ^^>^ ^e^^ ^>-§-*M ^^^^7l«^l cfl^ 

^^*>Jl, AAA RADIUS >^>-g-*H -¥-^^^7101] tfltl: =^ 

t!r^, JL^ilP^ 3.v}<UlP «J-^<^1 9X^^, Ji^IP 

^ PAPCPassword Authentication Protocol )«o^-<5^^ CHAP(Challenge Handshake 

Authentication 
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Protocol) «oi-^<^l 9X:n., n^A ^<>]^^A ^^^91^] <=^-¥-# '^^^4: <=']-%-^}^ 

PAP«o^^^ PPP(Point to Point Protocol) ^^^^] >^>-g-Sl^ €^>^ 

7l* ^"?l^>7l >^>-§-;^> ^Ji^^H AAA ^i«1S ^e-S.^ "IIa];^!!- ^\JI\c] 

ZL ^4<>11 ^^5^1-71 ^^-i- §^ «o^<i^-^S A>-g-;^> tijig^l^ FA^l-^1^ :a^^^> 

^o] :5i^5lr^, FAaf AAA ^i^l ^>ol«^l^ <a-SS|-sl<H ^^^i=f. ^.e^Jl, a]-^;^}^ on^^]^ 
^oi^ ^7] ^Sfl «>^^ol ^ ^ CHAP <?1^1}-^^ PAP:a-i:f a]^^^o1] oy^ 

^>7fl ^^sr>7] ^tt ^^>S. ^^ol o]-o^ AiHl7> A>-8-^Hl ^fl i^l^j^l^ 

^O.^ CHAP ^S|-Sr>Jl A-]tH7> A>^^>oll7fl 

•a^iM- ^ 9X7] nfl^ofl PAP ^j-^ticf «y:^^>cf. 2-«><a IP 

Jl^ IP^ CHAP '^l^^J-^^a}- ^^^t^. ^^34^^^ n>^]^ 

AAA A-lH]^ ^Alci-^7io]l cfl^ ^^^7} ^lA];^!!- FAS ^^1^].^ DflolE-] A-^a] 

i# ^tb ^d^^ #14711 Slol, ^A1C1-^71<2|- FAAHoll t-llo]E^ ^^Al^ ^ $i 

711 Sl^, «fl^ t-11o]E-^ Al3]-£)^ Al^oll FA<^lAi ^"^^^^^ 

oilAl^l* AAAAialS €^tbi4. AAA a-IhI^ ^1^2)-^^^ ^lAj^ll- <?1^^^ ^T^S ^ 
^^sl^ ^1^4^^7> ollAi;^!!- FAS ^^srH ^^^4. 

£2^ FA^ AAA A^i3^A>oloi] t^]o]B\ ^^Ajofl mo]^ RADIUS ^SS-f-^ ^2: 
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■<!^^;=^>( Identifier)^ Ibyte^ <^^] ^l^l^l* ^^^>fe ^^^V^^l^f. ^ol(Length)^ ^ 
^1 RADIUS ^l^l^l^ 3.^, ^^^V, S.^^ ^d'^]'^]^. S 

^7> RADIUS S-S-S.^ ^l^l^l* T^^^^^-. FA^I- AAA ^iB] /.}o]c>\] z^]o]b\ ^^^^] A>-g- 
Sl^ RADIUS HS.S#2^ uflAl^l^oflA^ ^e-S-^ ^^]^] S-S. DflAlx] 

^V^l'Hl cfltb ^^^>7l <y#a:^ >^>^t!:t^. tfl«-o^ ^^^^i cfl 

tl: ^^^'^l ^^^^ ^l^l^l ^ ^51M- ^e-S-^ ^^1^1^ 

^ ^cf. <^l-e-^ ^l^l^m ^^1 ^^^>7l ^^A^^ <a^^# ^^]^] 

7i^s ^>l-^;^<^> ^e^^ ^i^i^l^ *^1-g-^H ^>-§- 

^1- wi^^ii- ^:£5F^>7l ^^A-i A>-g-£i7l tqi^ofl M-^o)! ^>1-<H ^ ^ ti7l tfl^oicf. -q- 
^<^] ^€-^;^<^> AAA^iwIcHlA-^ ^Hl^f ^-^ w]^7l# ^^AS. MD5 

5}-)^ ^^^^i M-^ ^4 ^^slr^^f tiling ^ o;i7l ufl^oicl-. 

1451-^1, ^2fl^ RADIUS ^S.S€-<>lMi >^}-§-*>^ ^e-S-^ ^]^]^] ^vo^ 
«fl7l7> cf^^ 7l3l ^e^^ ^Al^l» AAA -^i-fl^l AAA^itfl^ 7]^ 

^]^]^]^] tfl^^iS "^<aol uiiAl^l i^:^o^ ^A^#^ ^^^M 

o> ^>ji. ^^sl no]B\vi\]o]^^o^ ;.>^ ^xg- ^ o^el7M e] 4^ 

o] ^o]7}B.S. AAA^iH^ Al^^oil ^8>7l- ^^7}^ ^2fl^>^ ^^l^o] o;i 

4. 
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<18> ^ «Vt^^ V>}9\. ^^]^^ n^t}7] ^^S. ZL ^^^^tl 

sfl^ofl S^ffl cf^o^ ^e-S.^ '^l-^l^l7> ^Al^ AAA^i^l^ AAA^H^I^ >\ 

^1^^ ^>€-^S. § ^ 9X^^ AAA^^iH «j-^l5>c.^ 
<19> ul-sl- ^^^^>7] ^ ^^51 ^^1^. FACForeign Agent)<>nAi 

o]^^S^ ^A^^l- i^^>^ ^e^^ ^Al^loflA-l ojo^ol ^^^^ >a-7l ^^i^S. -^g^ 

^l^l^l t\x\ -y^^s ^^4: "el^^^i- ^V7l ^ 

^^-S-^ ^l^l^l* AAACAuthentication Authorization and Account ing)Ai tf| 

5. ^^^>^ ^7i AAA^iwl^Hl^i ^7i ^^*>^ 5£^^> 

^ oil o] oil o] oil o] ^-iBl^Hl ^-?-^> «o^^l# ^tb °11^1^1 ^-iBl ^c}-'^^ ^l^^V^dl 

<20> ZielJl, >a-7l AAAA-ltJl<^lA-l ^e^^ "11^1^1* ^^^>^ ^^J^, ^e^^ ^1 

^1^1^ 91^^"^] A^^^'^ SX^ ^^7i DflAi^^i ni-^HlriiM^ "^A^; ^ 
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tilJE^l-c^ ^^1^>^ ^^^>-g-^]-S ^^1* i^^m ^^1-2.^ 

<22> ol^>, ^ ^i^ofl n:).s. ^-^tb ^2:§><:>^ ^^-II^VtII ^^^>^ 

FAS^ AAA^^^ ^M<^] ^>-g-*>^ RADIUS fl-^<=Hl^ ^^-S.^ ^^l^l^Hl tfl 

^ 91^^^ i^-g-^ ^^i^ i^lAl^lsl-s. nil ^ «>^^^> ^>^. ^>-g-^> 

wl^^l^ ^^2}-oil£ «i tq-^ ^52i-7> M-5q-o> ^, ^^^^ ^^o] sl^l ^o_x^ 

^ ^?17> ^1A1;<11. 7]-S^flA-l ^-^^^91 «J-^l^>7l ^^V ^olcf. 

<23> ^ ^rgofl rcj-s. :^eja.^ ^l^l^l* ^^^^>^ ^^^S.. o]^ 

^^^?\] ^^^}^ T^^^ ^cf. s:^(code)(30, 37)^ 1 wV^lMS ^1^1:^10^ ^^.^ q. 
El-xfl^ -^=^^>^>( Identifier) (31, 38)^ IbyteS. <^^] x^l^l^ll- ^^^>^ "^^^l^^]^. ^ 
(Length) (32. 39)^ ^^1 RADIUS ^S.S.^ ^l^l^l^ 3.^, ^^^>, € 

i^tt ^^^l^m. 5Et!:, ^^'^l ^>-g-5l^ <y#^ 16w]-olS7> ^Jl M-x^^l ^ t^jol 
ti^l ^A^^ ^B}-ifl^ ^^^^71- RADIUS ^1^1* ^^^^cf. 

^^>7l <y^5jt# ^>-g-tlrCl-. ::t2fl^^ ^l^l^l ^^^^] ^^^^] ^^^91 
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^oi^ ^i^i^i ^ ^<=>]M ^ 



^e-S.^ ^l^l^l* ^ = ^ PAP ^x] <yo^o^ o]^^^ A>-g-s:H^ 

^^^^ <?1^^(33)S. ^^l^Jl PASSWD_AUTH ^^^^(35-36)^] :&k^S. 
«fl^ ^^^^(35-36)^ PASSWDJVUTHofl ^^^^^ A>-g-^]- til^^l^l '^-J:^* 

^Vji, ^e^^ ^l^l^l^ ^efl(type), length), mvalue)^^S. ^^^^^S. 

4. s=(30)<^l^ ^e-S-^ t>ilAl^l# ^iiil*}^ 1^ ^ii^^XSDl- ^^^>t^, 

^<^1(32)* ^^4. *?]^-¥-(33)«1]^ 3.^ 0-^S. ^1]^ ^ FAsq- AAA ^i^l ^Ho]] a] 
SJ^^H MD5 'y:zie:i#(«a-^2|-)^ ^^tbi^. MD5 ^Jis]^* ^^t!: ^^l- 51:^ 
16byte^ ^l^l^l (Message Digest) ^, ^l^^^ ^^A^ i^l^l^l^ 

^[^^(40)011 <a^*>Jl, ^^^^(41~43)» S.^^ ^^-S.^ '^Ml^m AAA^itHS. ^^^^Vr^- 
AAA ^itil^ ^e.^^ ^lAlxloi]Ai oi^w.(40)o^ ^^^^ ^:£S ^■1^^>:0L, ^ 

^BflAi oi^w.(4o)oil 0^ ^11^ ^ FAS^- AAA ^}o]ci\] ^-B-*>^ ^-n- wl^^l* 

<a^o.^ MD5 ^^al^^ ^^^>^ lewVojEo^ x:]-o]:^]^^ ^o] oi^^o] 

^^-^^ ^i^tb 91^^^ ^]M^c^ ^^^91 ^l^l^l 



<25> 
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<26> CHAP ^>^^>^ ^-T-<^1^ ^^^(33)^ ^^1^ 

Jl CHAP_CHALLENGEe^^ ^^^-^(34-36)21 ^^cf. Sfi^ ^^^^ (34-36) 2^ 

CHAP_CHALLENGE<^1 ^i^^ ^>-§-^> til^7l^ 4^^^>Jl. ^^^^ ^ 

Alxjo^ ^^^^s. ^^(30)<^1^ ^e-S-^ ^l^l^lS 5^^1*>^ 1* -^t 

^}(31)» ^^^H, ^<^1(32)» tl#^(33)<»fl^ S.^ O^S. 5fl^ ^ FASf AAA 

A>o]oii wl^7l» <y^^>oi MD5 ^aial## ^^t!:^-. MD5 ^^tt 
16byte^ ^1^1:^1 cfol^l^E o]^^ Afl^^ ^^-fi.^ ^l^l^l^ 
(40)<^1 ^>y^(41~43)» S.^^ ^e^^ ^^1^1* AAAA^tHS. ^^tb^. AAA 

^^^(40)<H1 S.^ 0^ ^fl^ ^ FA^^I- AAA -""V^Hl ^-fr^>^ ^-^ tijig^jsl- t^Ulxl* 
<a^^s. s-H MD5 -^jih:!^^ -M^srV^ lewi-o]-^^ ^l^l^l ^91 '^^^^] 

i^^l^lS. atb, 2-W>«a IP ji^ IP^ CHAP 

SlT^, Jl^ IPl}-^<:>flA-1^ ol^«j-Alol pAps^. CHAP-^l ^-g-^ ^ 9X^^ -2.ti}<a 

^ ^A]^ ^ oj^ ^OM, olfi^-^^ ^ ^ ^xgo^ 7]^^ ^Tg.^^ 
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<29> 0]^^S\. ^Ol, ^ ^Tg^ Bfl^dlolBl VilH^ollA-l ^^^O] Cf^O.^ ^^^^ ^^^1 

DflAl^l* ^eI*>:E.S, AM ^ia^ofl ai)-«-*>7"|- ^>^3s:>c^ i=i-^sl^ ^^1-* Is^^ls-H, AAA 
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[^^D- 1] 

FA(Foreign Agent) 'HI ^^^^^ ^^^>^ ^eA^ ^^l^l<Hl^i 
91^^^ ^^^^^ ol^^].^ 32^-;^3z)-; 

^^^H ^S^^^^ ^1^1^] cfA] o]^^s. 

^7] -^7] ^:5l ^e-S.^ AAACAuthentication 

Authorization and Account ing)^itfl-S. ^^^l-fe- j^^^^; 

^7] AAA^ittloflA^ ^e^^ ^1^1 ^^^m i^*>^ ^^1-^ 

S oiloloilo]oi]ol A^a^oi] j7).a.^]. tij-x]^ o^t!: ^e-S.^ cilA];^] ^e) . 

[^^I}- 2] 

^7] AAA^iw1<HlAi ^l^l^l* ^^^1-^ 4^^, ^7l ^e-S-^ ^l^l^l^ 
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is. 1] 



10 

\ 



FA 



ag gS (Access-Request! 



12 



Si ^KAccess-Accept)^ 



,13 



11 



AAA 



DW^D^^ fiS(Account-RequestK 



.14 



5i:?KAccount-ResponseK' 



J 5 



2] 



2H(1) 
(code) 



21 



*s'SXKl) 
(Identifier) 



22 



/- 

Si 0! (Length) (2) 



ei^^(Authenticator) (16) 



^23 



0^¥(Attribute) 

— 7 — 

24 



17-16 



1020000050068 2001/1/ 



is. 31 



33 



34 



35 



30 



\, . / 



31 



(code) 



(Identifier) 



i^0I(2) 
(Length) 



0X00000000 
0X00000000 

(Authenticator) 



"PASSWD^UTH" 



^^¥(34^) 



T 



36 



> 



gJ^S^01 MD5 



^21 WIAIX! 

(Message Digest) 
^ 16b^0|M 



fis Oil A! XI] 



37 



40^ 

.4ri 

42" 
43" 



38 



(code) 



39 



(Identifier) 



^01(2) 
(Length) 



16UhO|eoj 

■ 2im^ 



(Authenticator) 



' ^^^(^4^) 



"PASSWDJVUTH" 

= 011^ S2JS^ 
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